General
- Target 2026-07-13_8ab65d0adb25797d9f8ee76acfe0176a_coinminer_elex_wannacry
- Size 488KB
- Sample260714-bdr5yaby5k
- SHA256 deb9adafbfefd427234cf45ddf1a0c6a507f5da9f49238faba08e016e36b5317
- MD5 8ab65d0adb25797d9f8ee76acfe0176a
- SHA1 7d026e22dd7ea67e25a7b13f1257da3db33bffc2
- SHA512 b25d01ba6e275d9e7b2e21a72d650faa8788bc619610d195f12e582ccce8c3959dcc969b5844c2d2085de39ca63a873966935d131c92ccac99e6e49150376635
- SSDEEP 6144:mAE+xhNq1hHRPba2ZZaTmpcePau/1v3yaN9sOq:mAE+xDq1NNbaJmpcK93yOVq
- TLSH T1FEB4BE85F045EF2CEDD0AA78BCC945B5A1725E0EEC854D5B6A887F4CBB342C2276391C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_8ab65d0adb25797d9f8ee76acfe0176a_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_8ab65d0adb25797d9f8ee76acfe0176a_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_8ab65d0adb25797d9f8ee76acfe0176a_coinminer_elex_wannacry
- Size 488KB
- SHA256 deb9adafbfefd427234cf45ddf1a0c6a507f5da9f49238faba08e016e36b5317
- MD5 8ab65d0adb25797d9f8ee76acfe0176a
- SHA1 7d026e22dd7ea67e25a7b13f1257da3db33bffc2
- SHA512 b25d01ba6e275d9e7b2e21a72d650faa8788bc619610d195f12e582ccce8c3959dcc969b5844c2d2085de39ca63a873966935d131c92ccac99e6e49150376635
- SSDEEP 6144:mAE+xhNq1hHRPba2ZZaTmpcePau/1v3yaN9sOq:mAE+xDq1NNbaJmpcK93yOVq
- TLSH T1FEB4BE85F045EF2CEDD0AA78BCC945B5A1725E0EEC854D5B6A887F4CBB342C2276391C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.